diff --git a/tests/test_database.py b/tests/test_database.py
index 48e253026..e4f68ca56 100644
--- a/tests/test_database.py
+++ b/tests/test_database.py
@@ -25,63 +25,69 @@ def json_style():
     )
 
 
-def test_create_flow(client: TestClient, json_flow: str):
+def test_create_flow(
+    client: TestClient, json_flow: str, active_user, logged_in_headers
+):
     flow = orjson.loads(json_flow)
     data = flow["data"]
     flow = FlowCreate(name="Test Flow", description="description", data=data)
-    response = client.post("api/v1/flows/", json=flow.dict())
+    response = client.post("api/v1/flows/", json=flow.dict(), headers=logged_in_headers)
     assert response.status_code == 201
     assert response.json()["name"] == flow.name
     assert response.json()["data"] == flow.data
     # flow is optional so we can create a flow without a flow
     flow = FlowCreate(name="Test Flow")
-    response = client.post("api/v1/flows/", json=flow.dict(exclude_unset=True))
+    response = client.post(
+        "api/v1/flows/", json=flow.dict(exclude_unset=True), headers=logged_in_headers
+    )
     assert response.status_code == 201
     assert response.json()["name"] == flow.name
     assert response.json()["data"] == flow.data
 
 
-def test_read_flows(client: TestClient, json_flow: str):
+def test_read_flows(client: TestClient, json_flow: str, active_user, logged_in_headers):
     flow_data = orjson.loads(json_flow)
     data = flow_data["data"]
     flow = FlowCreate(name="Test Flow", description="description", data=data)
-    response = client.post("api/v1/flows/", json=flow.dict())
+    response = client.post("api/v1/flows/", json=flow.dict(), headers=logged_in_headers)
     assert response.status_code == 201
     assert response.json()["name"] == flow.name
     assert response.json()["data"] == flow.data
 
     flow = FlowCreate(name="Test Flow", description="description", data=data)
-    response = client.post("api/v1/flows/", json=flow.dict())
+    response = client.post("api/v1/flows/", json=flow.dict(), headers=logged_in_headers)
     assert response.status_code == 201
     assert response.json()["name"] == flow.name
     assert response.json()["data"] == flow.data
 
-    response = client.get("api/v1/flows/")
+    response = client.get("api/v1/flows/", headers=logged_in_headers)
     assert response.status_code == 200
     assert len(response.json()) > 0
 
 
-def test_read_flow(client: TestClient, json_flow: str):
+def test_read_flow(client: TestClient, json_flow: str, active_user, logged_in_headers):
     flow = orjson.loads(json_flow)
     data = flow["data"]
     flow = FlowCreate(name="Test Flow", description="description", data=data)
-    response = client.post("api/v1/flows/", json=flow.dict())
+    response = client.post("api/v1/flows/", json=flow.dict(), headers=logged_in_headers)
     flow_id = response.json()["id"]  # flow_id should be a UUID but is a string
     # turn it into a UUID
     flow_id = UUID(flow_id)
 
-    response = client.get(f"api/v1/flows/{flow_id}")
+    response = client.get(f"api/v1/flows/{flow_id}", headers=logged_in_headers)
     assert response.status_code == 200
     assert response.json()["name"] == flow.name
     assert response.json()["data"] == flow.data
 
 
-def test_update_flow(client: TestClient, json_flow: str):
+def test_update_flow(
+    client: TestClient, json_flow: str, active_user, logged_in_headers
+):
     flow = orjson.loads(json_flow)
     data = flow["data"]
 
     flow = FlowCreate(name="Test Flow", description="description", data=data)
-    response = client.post("api/v1/flows/", json=flow.dict())
+    response = client.post("api/v1/flows/", json=flow.dict(), headers=logged_in_headers)
 
     flow_id = response.json()["id"]
     updated_flow = FlowUpdate(
@@ -89,7 +95,9 @@ def test_update_flow(client: TestClient, json_flow: str):
         description="updated description",
         data=data,
     )
-    response = client.patch(f"api/v1/flows/{flow_id}", json=updated_flow.dict())
+    response = client.patch(
+        f"api/v1/flows/{flow_id}", json=updated_flow.dict(), headers=logged_in_headers
+    )
 
     assert response.status_code == 200
     assert response.json()["name"] == updated_flow.name
@@ -97,18 +105,22 @@ def test_update_flow(client: TestClient, json_flow: str):
     # assert response.json()["data"] == updated_flow.data
 
 
-def test_delete_flow(client: TestClient, json_flow: str):
+def test_delete_flow(
+    client: TestClient, json_flow: str, active_user, logged_in_headers
+):
     flow = orjson.loads(json_flow)
     data = flow["data"]
     flow = FlowCreate(name="Test Flow", description="description", data=data)
-    response = client.post("api/v1/flows/", json=flow.dict())
+    response = client.post("api/v1/flows/", json=flow.dict(), headers=logged_in_headers)
     flow_id = response.json()["id"]
-    response = client.delete(f"api/v1/flows/{flow_id}")
+    response = client.delete(f"api/v1/flows/{flow_id}", headers=logged_in_headers)
     assert response.status_code == 200
     assert response.json()["message"] == "Flow deleted successfully"
 
 
-def test_create_flows(client: TestClient, session: Session, json_flow: str):
+def test_create_flows(
+    client: TestClient, session: Session, json_flow: str, logged_in_headers
+):
     flow = orjson.loads(json_flow)
     data = flow["data"]
     # Create test data
@@ -119,7 +131,9 @@ def test_create_flows(client: TestClient, session: Session, json_flow: str):
         ]
     )
     # Make request to endpoint
-    response = client.post("api/v1/flows/batch/", json=flow_list.dict())
+    response = client.post(
+        "api/v1/flows/batch/", json=flow_list.dict(), headers=logged_in_headers
+    )
     # Check response status code
     assert response.status_code == 201
     # Check response data
@@ -133,7 +147,9 @@ def test_create_flows(client: TestClient, session: Session, json_flow: str):
     assert response_data[1]["data"] == data
 
 
-def test_upload_file(client: TestClient, session: Session, json_flow: str):
+def test_upload_file(
+    client: TestClient, session: Session, json_flow: str, logged_in_headers
+):
     flow = orjson.loads(json_flow)
     data = flow["data"]
     # Create test data
@@ -147,6 +163,7 @@ def test_upload_file(client: TestClient, session: Session, json_flow: str):
     response = client.post(
         "api/v1/flows/upload/",
         files={"file": ("examples.json", file_contents, "application/json")},
+        headers=logged_in_headers,
     )
     # Check response status code
     assert response.status_code == 201
@@ -161,7 +178,9 @@ def test_upload_file(client: TestClient, session: Session, json_flow: str):
     assert response_data[1]["data"] == data
 
 
-def test_download_file(client: TestClient, session: Session, json_flow):
+def test_download_file(
+    client: TestClient, session: Session, json_flow, active_user, logged_in_headers
+):
     flow = orjson.loads(json_flow)
     data = flow["data"]
     # Create test data
@@ -172,11 +191,12 @@ def test_download_file(client: TestClient, session: Session, json_flow):
         ]
     )
     for flow in flow_list.flows:
+        flow.user_id = active_user.id
         db_flow = Flow.from_orm(flow)
         session.add(db_flow)
     session.commit()
     # Make request to endpoint
-    response = client.get("api/v1/flows/download/")
+    response = client.get("api/v1/flows/download/", headers=logged_in_headers)
     # Check response status code
     assert response.status_code == 200
     # Check response data
@@ -190,31 +210,43 @@ def test_download_file(client: TestClient, session: Session, json_flow):
     assert response_data[1]["data"] == data
 
 
-def test_create_flow_with_invalid_data(client: TestClient):
+def test_create_flow_with_invalid_data(
+    client: TestClient, active_user, logged_in_headers
+):
     flow = {"name": "a" * 256, "data": "Invalid flow data"}
-    response = client.post("api/v1/flows/", json=flow)
+    response = client.post("api/v1/flows/", json=flow, headers=logged_in_headers)
     assert response.status_code == 422
 
 
-def test_get_nonexistent_flow(client: TestClient):
+def test_get_nonexistent_flow(client: TestClient, active_user, logged_in_headers):
     uuid = uuid4()
-    response = client.get(f"api/v1/flows/{uuid}")
+    response = client.get(f"api/v1/flows/{uuid}", headers=logged_in_headers)
     assert response.status_code == 404
 
 
-def test_update_flow_idempotency(client: TestClient, json_flow: str):
+def test_update_flow_idempotency(
+    client: TestClient, json_flow: str, active_user, logged_in_headers
+):
     flow_data = orjson.loads(json_flow)
     data = flow_data["data"]
     flow_data = FlowCreate(name="Test Flow", description="description", data=data)
-    response = client.post("api/v1/flows/", json=flow_data.dict())
+    response = client.post(
+        "api/v1/flows/", json=flow_data.dict(), headers=logged_in_headers
+    )
     flow_id = response.json()["id"]
     updated_flow = FlowCreate(name="Updated Flow", description="description", data=data)
-    response1 = client.put(f"api/v1/flows/{flow_id}", json=updated_flow.dict())
-    response2 = client.put(f"api/v1/flows/{flow_id}", json=updated_flow.dict())
+    response1 = client.put(
+        f"api/v1/flows/{flow_id}", json=updated_flow.dict(), headers=logged_in_headers
+    )
+    response2 = client.put(
+        f"api/v1/flows/{flow_id}", json=updated_flow.dict(), headers=logged_in_headers
+    )
     assert response1.json() == response2.json()
 
 
-def test_update_nonexistent_flow(client: TestClient, json_flow: str):
+def test_update_nonexistent_flow(
+    client: TestClient, json_flow: str, active_user, logged_in_headers
+):
     flow_data = orjson.loads(json_flow)
     data = flow_data["data"]
     uuid = uuid4()
@@ -223,17 +255,19 @@ def test_update_nonexistent_flow(client: TestClient, json_flow: str):
         description="description",
         data=data,
     )
-    response = client.patch(f"api/v1/flows/{uuid}", json=updated_flow.dict())
+    response = client.patch(
+        f"api/v1/flows/{uuid}", json=updated_flow.dict(), headers=logged_in_headers
+    )
     assert response.status_code == 404
 
 
-def test_delete_nonexistent_flow(client: TestClient):
+def test_delete_nonexistent_flow(client: TestClient, active_user, logged_in_headers):
     uuid = uuid4()
-    response = client.delete(f"api/v1/flows/{uuid}")
+    response = client.delete(f"api/v1/flows/{uuid}", headers=logged_in_headers)
     assert response.status_code == 404
 
 
-def test_read_empty_flows(client: TestClient):
-    response = client.get("api/v1/flows/")
+def test_read_empty_flows(client: TestClient, active_user, logged_in_headers):
+    response = client.get("api/v1/flows/", headers=logged_in_headers)
     assert response.status_code == 200
     assert len(response.json()) == 0